$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: OcOw7am1qguSVldkel0qHLc6x0S5zkV7kU+qnhCmD6c= Subject key identifier: B2:41:CA:86:68:4A:E6:CA:70:48:40:87:80:0C:90:34:AC:58:13:B6 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 761E61141E5867B192B612BE928D526F44CBA48A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 0151 Signing time: Sun 18 Oct 2026 18:20:07 +0000 Manifest this update: Sun 18 Oct 2026 18:15:07 +0000 Manifest next update: Wed 21 Oct 2026 18:34:07 +0000 Files and hashes: 1: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: vVUpzkuSUfarIfLkwRtyuH2oVYyylY3TA5TsGdrcdus=) 2: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 3: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 18:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1e:61:14:1e:58:67:b1:92:b6:12:be:92:8d:52:6f:44:cb:a4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Oct 18 18:15:07 2026 GMT Not After : Oct 21 18:34:07 2026 GMT Subject: CN=B241CA86684AE6CA70484087800C9034AC5813B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:26:0b:01:db:d5:22:c7:2b:23:a7:48:a2:b0: 2f:9c:95:e7:04:6f:27:72:14:bf:dc:16:bc:43:36: d2:56:3f:02:fe:61:01:9a:22:41:22:03:40:fb:9b: 76:a5:f3:95:95:c6:cf:4b:9b:76:5c:15:c8:6b:67: b0:69:bb:d8:ef:9b:91:09:2f:93:60:cf:93:e5:9d: e2:36:5d:0e:df:2f:48:a2:7a:40:f4:ba:60:0b:d8: 45:8f:bd:13:6a:d7:22:28:ce:da:f9:98:36:89:9f: ab:19:3f:4b:da:2a:fb:aa:38:d5:6a:0c:82:e1:8d: 7e:c9:c5:cf:21:39:72:de:45:f9:65:df:83:01:62: dd:14:c7:b8:fc:8d:23:7e:0b:95:9e:bf:b7:a5:3b: 32:1f:51:fc:f9:f3:32:02:1a:eb:8d:00:f8:85:bd: 9e:4f:91:b3:09:53:93:e8:42:cf:ed:2b:57:1a:fc: d2:17:99:2d:9e:dc:a5:1e:42:e7:bc:f1:8b:f3:4c: d6:63:b9:60:32:f2:fb:b2:e5:fc:f5:1f:a8:58:f2: bb:ac:8a:f1:21:66:ad:cd:bf:21:50:e2:b4:41:b9: 89:3b:d2:5b:f5:a2:79:07:e3:f0:e6:09:e5:9f:7b: 6c:35:b1:cb:05:cf:a1:90:37:8f:d2:0a:bd:05:96: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:41:CA:86:68:4A:E6:CA:70:48:40:87:80:0C:90:34:AC:58:13:B6 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4a:da:5e:69:d9:a4:8e:9e:86:76:1d:30:f3:80:03:80:0e: 3f:7a:7a:1c:04:43:a0:77:4f:8d:38:8d:c2:65:76:e1:5d:b5: 43:ce:0a:f3:b6:2d:42:1a:aa:e8:41:a5:d5:69:0a:95:20:0a: 86:b9:53:e7:74:41:5e:5c:73:a4:f8:af:de:c3:3b:9a:86:43: 35:16:4b:25:3f:e3:09:0a:40:59:eb:e8:d7:5e:f0:fa:ee:3e: c7:f1:a9:73:e8:99:71:a9:6e:a1:1b:17:7a:30:50:53:c3:a4: d8:96:36:cc:01:60:f7:26:00:f5:30:75:ca:5d:07:1e:27:7c: 8c:b6:79:a4:da:3e:fe:70:01:f5:cd:f3:4e:83:e2:c4:06:28: e7:16:71:8d:19:70:82:a0:b7:13:19:f4:3e:94:10:03:95:6b: 4b:71:9f:2c:34:f3:2e:0e:9e:f4:64:ac:01:1b:93:ab:d4:32: 8c:bf:b0:d2:8a:de:8f:08:9d:bd:2d:5a:04:78:aa:7f:3d:e4: 38:1a:55:e7:fc:43:50:df:ca:0f:0d:47:6c:96:6e:33:6c:a3: 56:6d:28:2a:a9:5e:7b:03:bb:ba:e7:0c:77:20:22:ad:26:36: e2:1a:b5:73:db:61:9d:76:ef:dc:e7:08:6a:83:f8:67:f3:6f: 20:06:85:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdh5hFB5YZ7GSthK+ko1Sb0TLpIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjEwMTgxODE1MDdaFw0yNjEwMjExODM0MDdaMDMxMTAvBgNV BAMTKEIyNDFDQTg2Njg0QUU2Q0E3MDQ4NDA4NzgwMEM5MDM0QUM1ODEzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJgsB29Uixysjp0iisC+clecE bydyFL/cFrxDNtJWPwL+YQGaIkEiA0D7m3al85WVxs9Lm3ZcFchrZ7Bpu9jvm5EJ L5Ngz5PlneI2XQ7fL0iiekD0umAL2EWPvRNq1yIoztr5mDaJn6sZP0vaKvuqONVq DILhjX7Jxc8hOXLeRfll34MBYt0Ux7j8jSN+C5Wev7elOzIfUfz58zICGuuNAPiF vZ5PkbMJU5PoQs/tK1ca/NIXmS2e3KUeQue88YvzTNZjuWAy8vuy5fz1H6hY8rus ivEhZq3NvyFQ4rRBuYk70lv1onkH4/DmCeWfe2w1scsFz6GQN4/SCr0FliE3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUskHKhmhK5spwSECHgAyQNKxYE7YwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkraXmnZpI6e hnYdMPOAA4AOP3p6HARDoHdPjTiNwmV24V21Q84K87YtQhqq6EGl1WkKlSAKhrlT 53RBXlxzpPiv3sM7moZDNRZLJT/jCQpAWevo117w+u4+x/Gpc+iZcaluoRsXejBQ U8Ok2JY2zAFg9yYA9TB1yl0HHid8jLZ5pNo+/nAB9c3zToPixAYo5xZxjRlwgqC3 Exn0PpQQA5VrS3GfLDTzLg6e9GSsARuTq9QyjL+w0orejwidvS1aBHiqfz3kOBpV 5/xDUN/KDw1HbJZuM2yjVm0oKqleewO7uucMdyAirSY24hq1c9thnXbv3OcIaoP4 Z/NvIAaFVg== -----END CERTIFICATE-----Generated at Mon Oct 19 02:22:02 2026 by rpki-client